health-check
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local Python scripts (
harness/scripts/health-check.py,harness/scripts/okf-check.py, andharness/scripts/wiki-health.py) to perform its diagnostic functions. These scripts are part of the skill's execution harness and are used for file hashing and version comparison. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it ingests and processes data from external configuration files (
.template-manifest.json) and a remote version file. However, this is part of the core diagnostic functionality, and the platform-leveldisable-model-invocation: truesetting significantly limits the risk of the agent being manipulated by malicious content within those files. - Ingestion points: Reads
.template-manifest.json,harness/version.json, and fetchesversion.jsonfrom the remoteRheinmir/setuprepository. - Boundary markers: None specified in the documentation.
- Capability inventory: The skill can execute three specific Python scripts located within the project harness.
- Sanitization: The documentation does not specify sanitization for the manifest or version data, as the scripts primarily perform deterministic hash and version comparisons.
Audit Metadata